Senior Offensive Security Engineer

🔥 12 hours ago

🏄 California, Washington – Remote

🏄 California – Remote ☕ Washington – Remote

💵 $160.3k - $305.4k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Unity

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2005

🏭 Manufacturing

💼 Consulting

📣 Marketing

Manufacturing • Consulting • Marketing

Unity is a leading platform providing tools and services for creators to build games, apps, and immersive experiences. With high-quality graphics, multi-platform support, and AI enhancements, Unity empowers developers in video gaming and other industries like manufacturing. Unity offers services such as Unity Engine, Unity Cloud, and Unity Grow, which include real-time 3D creation, user acquisition, and game monetization. The company also provides extensive resources, community support, and professional training for creators at all levels. Through its success plans and developer resources, Unity aids in solving complex problems and bringing ideas to life for gaming and enterprise professionals.

📋 Description

• Plan and run objective-based red team operations against cloud, corporate, and production environments. • Run purple team exercises with Security Operations to test and improve detection and response. • Conduct deep security testing of Unity products and services, including web applications, APIs, the engine, editor, client runtime, ads and monetization systems, and developer-facing platforms. • Find and demonstrate attack paths across multi-cloud environments, Kubernetes and containers, CI/CD pipelines, identity, and secrets. • Test LLM integrations, AI-native products, and agent workflows for prompt injection, data leakage, tool misuse, and excessive permissions. • Write clear, prioritized findings with realistic impact; work with owning teams on remediation and retest fixes. • Build and maintain tools, scripts, and automation that scale adversarial engineering and turn repeated findings into continuous checks. • Develop risk-based testing plans, complete red team or adversary emulation operations, provide executive-ready readouts, and track remediation. • Collaborate with Product Security, Infrastructure Security, Security Operations, and engineering teams.

🎯 Requirements

• 6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research), including leading engagements end to end. • Hands-on experience attacking cloud environments (GCP, AWS, or Azure), including identity, Kubernetes and containers, and CI/CD. • Strong web application and API security testing skills, with the ability to find logic flaws, not just scanner results. • Solid scripting or programming ability, for example Python, Go, or C/C++, to build tools and exploits. • Experience running adversary emulation or red team operations against realistic objectives, and working with defenders in purple team exercises. • Clear written and verbal communication; ability to explain technical risk to engineers and non-technical leaders. • Ability to work as part of a team, share ideas, offer support, and celebrate wins together. • English proficiency sufficient for professional verbal and written exchanges. • Preferred: Experience testing LLM-based products, AI agents, or AI-assisted developer tools. • Preferred: Reverse engineering, binary exploitation, or game client and anti-cheat security experience. • Preferred: Experience in gaming, ad tech, or large developer-facing platforms. • Preferred: Bug bounty, CVEs, conference talks, published research, or open-source security tooling. • Relevant certifications such as OSCP, OSEP, OSWE, or CRTO are useful but will not substitute for a track record.

🏖️ Benefits

• Comprehensive health, life, and disability insurance • Commute subsidy • Employee stock ownership • Competitive retirement/pension plans • Generous vacation and personal days • Support for new parents through leave and family-care programs • Office food snacks • Mental Health and Wellbeing programs and support • Employee Resource Groups • Global Employee Assistance Program • Training and development programs • Volunteering and donation matching program • Equity awards • Participation in company incentive plans, such as annual discretionary bonuses or sales commissions

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume